Senior Windows Engineer

Responsibilities & Qualifications

RESPONSIBILITIES

 

Servers

• Serve as Lead or Subject Matter Expert for the Windows Engineering area. Coordinate and delegate taskings as necessary
• Install, maintain, and upgrade servers such as Windows servers and other operating systems
• Maintain current baseline configurations on all server operating systems, and coordinate and document exceptions to baselines where necessary
• Provide application white-list management for all server software
• Support, maintain, and upgrade USITC’s virtualization platform
• Experience migrating to, building, and maintaining systems and applications in Microsoft Azure
• Support network infrastructure protocols including but not limited to DNS, DHCP, LDAP, NTP, Cloud Services
• Provide support for Cloud computing environments including but not limited to Platform as a Service (PaaS), Infrastructure as a service (IaaS), software as a Service (SaaS), and hybrid environments
• Work with Government personnel to support the migration of workloads of on-premises private cloud platforms to or from public cloud platforms
• Monitor Cloud environments for compliance with industry best practices and Commission security standards
• Integrate Cloud platforms with ITCNET using Active Directory Federation Services and SAML 0 single sign-on (SSO)
• Manage, maintain, and upgrade Microsoft Endpoint Configuration Manager site systems
• Strong Experience with Active Directory and Group Policy management
• Provide Tier 3 support to the USTIC Service Desk
• Experience migrating a windows environment from 10 to 11

 

Security Management

• Experience reading Tenable/Nessus scan reports and remediating findings based on CISA or DISA STIG guidelines
• Provide support to the Commission’s Security Operations Center for cybersecurity incidents and investigations
• Support and operate automated patch management and deployment mechanisms for all IT infrastructure. Manual patching processes shall be documented and followed to supplement automated processes where gaps are identified. This process may include after-hours patching up to twice a week
• Ensure that all IT infrastructure components are fully patched, and that anti-virus software is installed and up to date supporting USITC policies
• Maintain current baseline configurations on all IT infrastructure Coordinate and document baseline exceptions to systems where necessary
• Assist Government personnel in researching security vulnerability resolution and remediation strategies for IT infrastructure components and IT infrastructure
• Notify the appropriate contract and government personnel of any potential security incidents within timelines defined by USITC policies
• Assist with Government requests for information on security controls as requested by the Government
• Implement security controls, or make other changes to IT infrastructure components to address POAMs and audit findings
• Assist the USITC in the coordination of cybersecurity-related processes and activities for IT infrastructure These processes include, but are not limited to, Risk Management Framework (RMF) and system authorization, Cyber Incident Handling, System Life Cycle Management Processes (e.g., Engineering Change and Configuration Management), Vulnerability Management, Malware Protection, Security Assessments/Evaluations/Reviews, Continuous Monitoring

Storage

• Experience using, upgrading, patching, and maintaining a Commvault backup and recovery solution. This includes the ability to restore files, servers, and configurations from backup as needed 
• Coordinate and collaborate with the appropriate stakeholders to identify functional and technical requirements for new or enhanced network capabilities and/or services to support the USITC mission
• Work with Federal SMEs and technical leads to support the design, deployment, and management of new systems and services per Commission Change and Project Management policies
• Recommend new IT systems based on documented requirements set forth by the Commission
• Coordinate with Federal SMEs and technical leads to configure and test new system designs to ensure they meet the requirements and adjust them as needed
• Install, maintain, and upgrade Storage Area Network (SAN), backup hardware and software
• Identify problem areas affecting storage and backup systems
• Ensure records retention policies are implemented and enforced on storage and backup systems
• Support the rotation, storage, and off-site transfer and delivery of backup media Systems Engineering Support

 

REQUIRED QUALIFIC